gitlab Vulnerability Advisory Catalog

Total 1,419 security vulnerabilities recorded for gitlab software and firmware.

← Back to All Vendors
Component: dynamic_application_security_testing_analyzer

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, r...

📅 2023-03-09
CVSS 7.7 Dossier →
CVE-2022-3758 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ver...

📅 2023-03-09
CVSS 5.4 Dossier →
CVE-2023-1072 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all vers...

📅 2023-03-09
CVSS 4.3 Dossier →
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ver...

📅 2023-03-09
CVSS 8.7 Dossier →
CVE-2022-4331 MEDIUM
Component: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ...

📅 2023-03-09
CVSS 5.7 Dossier →
CVE-2023-0223 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ver...

📅 2023-03-09
CVSS 5.3 Dossier →
CVE-2022-4289 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 befor...

📅 2023-03-09
CVSS 6.4 Dossier →
CVE-2022-3381 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted U...

📅 2023-03-09
CVSS 4.3 Dossier →
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions startin...

📅 2023-03-09
CVSS 2.7 Dossier →
CVE-2023-0483 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ver...

📅 2023-03-09
CVSS 5.5 Dossier →
CVE-2022-4462 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ver...

📅 2023-03-09
CVSS 5.0 Dossier →
CVE-2022-4317 MEDIUM
Component: dynamic_application_security_testing_analyzer

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in re...

📅 2023-03-09
CVSS 5.0 Dossier →
CVE-2022-4315 MEDIUM
Component: dynamic_application_security_testing_analyzer

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with e...

📅 2023-03-08
CVSS 5.0 Dossier →
CVE-2022-4007 MEDIUM
Component: gitlab

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to ...

📅 2023-03-08
CVSS 5.4 Dossier →
CVE-2023-0518 MEDIUM
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, a...

📅 2023-02-13
CVSS 4.3 Dossier →
CVE-2022-4138 MEDIUM
Component: gitlab

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15...

📅 2023-02-13
CVSS 6.4 Dossier →
CVE-2022-3759 MEDIUM
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, a...

📅 2023-02-13
CVSS 4.3 Dossier →
CVE-2022-3411 MEDIUM
Component: gitlab

A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authe...

📅 2023-02-13
CVSS 6.5 Dossier →
CVE-2022-4206 MEDIUM
Component: dast_api_scanner

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization he...

📅 2023-02-01
CVSS 5.0 Dossier →
CVE-2022-4255 MEDIUM
Component: gitlab

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes...

📅 2023-01-27
CVSS 4.3 Dossier →
CVE-2022-4205 MEDIUM
Component: gitlab

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash....

📅 2023-01-27
CVSS 6.3 Dossier →
Component: gitlab

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to ...

📅 2023-01-27
CVSS 3.5 Dossier →
CVE-2022-4335 MEDIUM
Component: gitlab

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an...

📅 2023-01-27
CVSS 4.3 Dossier →
CVE-2022-4092 MEDIUM
Component: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page d...

📅 2023-01-26
CVSS 5.7 Dossier →
Page 26 of 60 (1,419 Total Records)